CVE-2021-37620

Exiv2 (the command-line utility and C++ library) has an out-of-bounds read vulnerability in versions ≤ 0.27.4 when reading metadata from crafted images, which could lead to denial of service. The issue is fixed in version 0.27.5. Affected users should upgrade to 0.27.5 or later to remediate. The ...

PT-2021-7924

Name of the Vulnerable Software and Affected Versions Exiv2 versions v0.27.4 and earlier Description A null pointer dereference was found in Exiv2, which can be triggered when printing the metadata of a crafted image file. This can potentially be exploited by an attacker to cause a denial of...

PT-2021-7928

Name of the Vulnerable Software and Affected Versions Exiv2 versions v0.27.4 and earlier Description The issue is related to an infinite loop in the Exiv2 library, which can be triggered when modifying the metadata of a crafted image file. This can potentially allow an attacker to cause a denial ...

CVE-2021-34334: Loop with Unreachable Exit Condition

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop is triggered when Exiv2 is used to read the metadata of a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of...

CVE-2021-37615: NULL Pointer Dereference

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A null pointer dereference was found in Exiv2 versions v0.27.4 and earlier. The null pointer dereference is triggered when Exiv2 is used to print the metadata of a crafted...

CVE-2021-37620: Out-of-bounds Read

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 versions v0.27.4 and earlier. The out-of-bounds read is triggered when Exiv2 is used to read the metadata of a crafted image file. An...

CVE-2021-37621: Loop with Unreachable Exit Condition

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop was found in Exiv2 versions v0.27.4 and earlier. The infinite loop is triggered when Exiv2 is used to print the metadata of a crafted image file. An attacker...

CVE-2021-37623: Loop with Unreachable Exit Condition

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop was found in Exiv2 versions v0.27.4 and earlier. The infinite loop is triggered when Exiv2 is used to modify the metadata of a crafted image file. An attacke...

CVE-2021-37615

Exiv2 (image metadata library) had a null pointer dereference in versions up to 0.27.4 when printing the interpreted metadata of a crafted image file (requires -p t or -P t). This could allow a denial-of-service condition if an attacker tricks a user into processing a crafted image. The issue is ...

CVE-2021-37621

CVE-2021-37621 affects Exiv2 up to v0.27.4; an infinite loop is triggered when printing the ICC profile (requires -p C), potentially causing denial of service. The issue is fixed in v0.27.5; upgrading Exiv2 to 0.27.5+ is recommended per provided advisories.

CVE-2021-34334 Denial of service due to integer overflow in loop counter

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop is triggered when Exiv2 is used to read the metadata of a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of...

CVE-2021-37615 Null pointer dereference in Exiv2::Internal::resolveLens0x319

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A null pointer dereference was found in Exiv2 versions v0.27.4 and earlier. The null pointer dereference is triggered when Exiv2 is used to print the metadata of a crafted...

CVE-2021-37615

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A null pointer dereference was found in Exiv2 versions v0.27.4 and earlier. The null pointer dereference is triggered when Exiv2 is used to print the metadata of a crafted...

CVE-2021-37621

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop was found in Exiv2 versions v0.27.4 and earlier. The infinite loop is triggered when Exiv2 is used to print the metadata of a crafted image file. An attacker...

Exiv2 安全漏洞

Exiv2 is a cross-platform C++ library and command line utility for managing image metadata. An infinite loop vulnerability exists in Exiv2 0.27.4 and earlier versions. An attacker could exploit this vulnerability to cause a denial of service via a specially crafted image file...

CVE-2021-37623 Denial of service due to infinite loop in JpegBase::printStructure (#2)

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop was found in Exiv2 versions v0.27.4 and earlier. The infinite loop is triggered when Exiv2 is used to modify the metadata of a crafted image file. An attacke...

CVE-2021-34334

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop is triggered when Exiv2 is used to read the metadata of a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of...

CVE-2021-37620

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 versions v0.27.4 and earlier. The out-of-bounds read is triggered when Exiv2 is used to read the metadata of a crafted image file. An...

CVE-2021-37622

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop was found in Exiv2 versions v0.27.4 and earlier. The infinite loop is triggered when Exiv2 is used to modify the metadata of a crafted image file. An attacke...

CVE-2021-37623

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop was found in Exiv2 versions v0.27.4 and earlier. The infinite loop is triggered when Exiv2 is used to modify the metadata of a crafted image file. An attacke...